chore(deps): bump the minor-and-patch group with 6 updates by dependabot[bot] · Pull Request #265 · webpack/webpack-doc-kit

dependabot · 2026-09-09T04:54:45Z

Bumps the minor-and-patch group with 6 updates:

Package	From	To
lucide-preact	`1.37.0`	`1.41.0`
webpack	`5.110.1`	`5.110.3`
eslint	`10.9.1`	`10.10.0`
globals	`17.11.0`	`17.12.0`
lint-staged	`17.4.1`	`17.5.0`
stylelint	`17.14.1`	`17.15.0`

Updates lucide-preact from 1.37.0 to 1.41.0

Release notes

Sourced from lucide-preact's releases.

Version 1.41.0

What's Changed

feat(icons): Add new icons germ and germ-off by @rrod497 in lucide-icons/lucide#4056

feat(icons): added door-stairwell icon & updated door-* icons by @jguddas in lucide-icons/lucide#3554

feat(icons): added credit-card-reader icon by @jguddas in lucide-icons/lucide#4616

feat(icons): added 'engine' icon by @benhaube in lucide-icons/lucide#4598

feat(icons): fixed germ & germ-off by @karsa-mistmere in lucide-icons/lucide#4789

chore(deps): bump the vue-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4771

feat(icons): added virus/virus-off icon by @karsa-mistmere in lucide-icons/lucide#4765

chore(copilot-reviews): Improve use-cases description. by @ericfennis in lucide-icons/lucide#4558

feat(icons): add can-soda icon by @jaynewey in lucide-icons/lucide#4718

feat(icons): added square-alert Icon by @viralcodex in lucide-icons/lucide#3687

chore(lab): Add label for lab icons by @ericfennis in lucide-icons/lucide#4793

feat(icons): changed lab/bottle-toothbrush-comb icon by @karsa-mistmere in lucide-icons/lucide#4756

ci(@lucide/lab): Create automatic release flow for @lucide/lab by @ericfennis in lucide-icons/lucide#4792

fix(icons): removed trash icon in favour of trash-2 by @jguddas in lucide-icons/lucide#3141

feat(icons): changed leaf icon by @karsa-mistmere in lucide-icons/lucide#4801

New Contributors

@jaynewey made their first contribution in lucide-icons/lucide#4718

@viralcodex made their first contribution in lucide-icons/lucide#3687

Full Changelog: lucide-icons/lucide@1.40.0...1.41.0

Version 1.40.0

What's Changed

feat(icons): added can icon by @l0uisgrange in lucide-icons/lucide#4767

feat(icons): added bridge icon by @Nykoula in lucide-icons/lucide#3949

feat(icons): added shrimp-off icon by @jguddas in lucide-icons/lucide#3613

feat(icons): added shopping-cart-plus & shopping-cart-minus icons by @Ajay199210 in lucide-icons/lucide#4248

fix(docs): updated artboard name on illustrator template by @EthanHazel in lucide-icons/lucide#4724

chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in lucide-icons/lucide#4781

feat(icons): added lighthouse icon by @Xougui in lucide-icons/lucide#4507

New Contributors

@Nykoula made their first contribution in lucide-icons/lucide#3949

@Ajay199210 made their first contribution in lucide-icons/lucide#4248

@Xougui made their first contribution in lucide-icons/lucide#4507

Full Changelog: lucide-icons/lucide@1.39.0...1.40.0

Version 1.39.0

What's Changed

fix(icons): added RWD metadata to monitor, tablet & smartphone icons by @karsa-mistmere in lucide-icons/lucide#4775

feat(icons): add whistle icon by @timmy471 in lucide-icons/lucide#3006

feat(icons): Add mail-pen icon by @jennieboops in lucide-icons/lucide#4399

Full Changelog: lucide-icons/lucide@1.38.0...1.39.0

... (truncated)

Commits

See full diff in compare view

Updates webpack from 5.110.1 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

v5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

Changelog

Sourced from webpack's changelog.

5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

Commits

a2d7b9c chore(release): new release (#21868)
d6e86c0 test(test262): assert two more errors webpack reports at build time (#21906)
6a963fe fix: keep require() into a concatenation substituted and unmangled (#21905)
e1eb099 fix: concatenated require() in require.ensure callback or computed reques...
8d1ab53 chore: escape literal NUL bytes in Compilation.js (#21904)
5e6c4d7 fix(defer): evaluate async dependencies where the deferred import sits (#21902)
7ea4fa3 fix: handle audited correctness edge cases (#21901)
c50713c fix: keep code generation data per result instead of per NormalModule (#21900)
ebd3be4 docs: document the post-minor stabilization week and out-of-band releases (#2...
80be700 fix(config): keep the resolved optimization.minimize a boolean (#21886)
Additional commits viewable in compare view

Updates eslint from 10.9.1 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)

c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)

5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)

427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)

9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)

87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)

8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

2417cad docs: Update README (GitHub Actions Bot)

9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)

8724829 docs: update compat table links (#21263) (fnx)

5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)

1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])

3c753f1 chore: update eslint (#21289) (renovate[bot])

1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)

08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)

77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])

007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)

0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

Commits

3f20a57 10.10.0
f4e5284 Build: changelog update for 10.10.0
bb47dc6 fix: update dependency file-entry-cache to v11 (#20801)
427ac0a fix: use format strings in debug calls (#21247)
b3d876b chore: disable npm audit in ecosystem tests (#21306)
9d81532 fix: support __proto__ in /* exported */ comments (#21261)
264b434 feat: add d and v flags to no-unexpected-multiline (#21305)
1696682 ci: restore EMFILE test on Node.js 26 (#21297)
2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296)
87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
Additional commits viewable in compare view

Updates globals from 17.11.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

Update globals (2026-09-01) (#353) 50a2119

Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

Commits

98008c3 17.12.0
50a2119 Update globals (2026-09-01) (#353)
779a11a Add __webpack_layer__ global (#351)
See full diff in compare view

Updates lint-staged from 17.4.1 to 17.5.0

Release notes

Sourced from lint-staged's releases.

v17.5.0

Minor Changes

#1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

#1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

#1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

#1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Changelog

Sourced from lint-staged's changelog.

17.5.0

Minor Changes

#1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

#1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

#1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

#1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Commits

dcb59f6 Merge pull request #1846 from lint-staged/changeset-release/main
9c8c6dc chore(changeset): release
586466f Merge pull request #1849 from lint-staged/improve-intent-to-add
45eda5f refactor: improve --intent-to-add detection
26372e3 Merge pull request #1848 from lint-staged/fix-color-detection
d718ccc fix: honor FORCE_COLOR/NO_COLOR env variables in non-TTY streams
be78a51 Merge pull request #1847 from lint-staged/intent-to-add
f9063b7 feat: refuse to run when files were staged with --intent-to-add
a767299 Merge pull request #1845 from lint-staged/updates
61ffd25 style: add VS Code extension config
Additional commits viewable in compare view

Updates stylelint from 17.14.1 to 17.15.0

Release notes

Sourced from stylelint's releases.

17.15.0

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

Added: selector-no-unmatchable rule (#9451) (@jeddy3).

Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@jsmitty12).

Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@giaBaoJS).

Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@sarathfrancis90).

Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@alexchen-sys).

Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@jeddy3).

Changelog

Sourced from stylelint's changelog.

17.15.0 - 2026-09-04

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

Added: selector-no-unmatchable rule (#9451) (@jeddy3).

Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@jsmitty12).

Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@giaBaoJS).

Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@sarathfrancis90).

Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@alexchen-sys).

Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@jeddy3).

Commits

0547bff Release 17.15.0 (#9484)
ac19a3c Fix custom-property-no-missing-var-function false positives for anchor posi...
23947ae Bump @humanfs/node from 0.16.6 to 0.16.8 (#9480)
53c74f7 Bump fast-uri from 3.1.5 to 3.1.7 (#9481)
26856e6 Bump the jest group across 1 directory with 2 updates (#9476)
b90ecd8 Bump browserslist from 4.28.4 to 4.28.8 (#9479)
70072c0 Add ignoreFunctions: [] to color-named and color-no-hex (#9463)
f0ac642 Bump postcss-import from 16.1.1 to 16.2.0 in the postcss group (#9477)
fc8db57 Bump globby from 16.2.3 to 16.2.4 (#9478)
aec96b0 Bump @csstools/css-syntax-patches-for-csstree from 1.1.8 to 1.1.9 in the csst...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [lucide-preact](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-preact) | `1.37.0` | `1.41.0` | | [webpack](https://github.com/webpack/webpack) | `5.110.1` | `5.110.3` | | [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.10.0` | | [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.0` | | [stylelint](https://github.com/stylelint/stylelint) | `17.14.1` | `17.15.0` | Updates `lucide-preact` from 1.37.0 to 1.41.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.41.0/packages/lucide-preact) Updates `webpack` from 5.110.1 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.110.1...v5.110.3) Updates `eslint` from 10.9.1 to 10.10.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.9.1...v10.10.0) Updates `globals` from 17.11.0 to 17.12.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.11.0...v17.12.0) Updates `lint-staged` from 17.4.1 to 17.5.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.4.1...v17.5.0) Updates `stylelint` from 17.14.1 to 17.15.0 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@17.14.1...17.15.0) --- updated-dependencies: - dependency-name: lucide-preact dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: globals dependency-version: 17.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lint-staged dependency-version: 17.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: stylelint dependency-version: 17.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-09-09T04:54:48Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
webpack-doc-kit	Ready	Preview	Sep 9, 2026 4:55am UTC

socket-security · 2026-09-09T04:55:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
lucide-preact@1.37.0 ⏵ 1.41.0	⁺¹	⁺¹	⁺¹
globals@17.11.0 ⏵ 17.12.0	⁺¹	⁺¹	^-1
stylelint@17.14.1 ⏵ 17.15.0			^-5
webpack@5.110.1 ⏵ 5.110.3		⁺¹	⁺¹
lint-staged@17.4.1 ⏵ 17.5.0			^-1
eslint@10.9.1 ⏵ 10.10.0	⁺¹

View full report

github-actions · 2026-09-09T04:58:53Z

⚡ Lighthouse report

Audited the Vercel preview deployment: https://webpack-doc-lr9sricq6-openjs.vercel.app

URL	Performance	Accessibility	Best Practices	SEO	Report
/	🟢 100	🟢 100	🟢 96	🟢 100	🔗
/about	🟢 100	🟢 96	🟢 100	🟢 100	🔗
/about/sponsors	🟠 86	🟢 95	🟢 96	🟢 100	🔗
/blog	🟢 100	🟢 96	🟢 100	🟢 100	🔗
/blog/posts/2026-02-04-roadmap-2026	🟢 99	🟢 93	🟢 100	🟢 100	🔗
/guides/getting-started	🟢 100	🟢 95	🟢 100	🟢 100	🔗
/docs/api/options	🔴 68	🟢 96	🟢 100	🟢 100	n/a
/docs/loaders/sass-loader	🟢 100	🟢 96	🟢 100	🟠 86	🔗

Scores are advisory (warn at 90); they do not fail the build. See .lighthouserc.json.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026

vercel Bot deployed to Preview September 9, 2026 04:55 View deployment

Navigation Menu

Uh oh!

chore(deps): bump the minor-and-patch group with 6 updates - #265

chore(deps): bump the minor-and-patch group with 6 updates#265
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-7b7ab93bb9

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

vercel Bot commented Sep 9, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 9, 2026

Uh oh!

github-actions Bot commented Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026

Version 1.41.0

What's Changed

New Contributors

Version 1.40.0

What's Changed

New Contributors

Version 1.39.0

What's Changed

v5.110.3

Patch Changes

v5.110.2

Patch Changes

5.110.3

Patch Changes

5.110.2

Patch Changes

v10.10.0

Features

Bug Fixes

Documentation

Chores

v17.12.0

v17.5.0

Minor Changes

Patch Changes

17.5.0

Minor Changes

Patch Changes

17.15.0

17.15.0 - 2026-09-04

Uh oh!

vercel Bot commented Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 9, 2026

Uh oh!

github-actions Bot commented Sep 9, 2026

⚡ Lighthouse report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel Bot commented Sep 9, 2026 •

edited

Loading